CVE-2025-62604 — MeterSphere logic flaw allows retrieval of arbitrary user information
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthentica…
Published: 2025-10-22 · CVSS: 5.3 · CVSS 4.0
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7